Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/tHTr5XOE2AQIAmeX6bEF9_SyjN4.roa
File: tHTr5XOE2AQIAmeX6bEF9_SyjN4.roa (raw, json)
Hash identifier: epfsb3OOIvHo6fyTzwRfJIJY7co+cdYqJwM6fSPvWjY=
Subject key identifier: B4:74:EB:E5:73:84:D8:04:08:02:67:97:E9:B1:05:F7:F4:B2:8C:DE
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C54
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tHTr5XOE2AQIAmeX6bEF9_SyjN4.roa
Signing time: Wed 29 Sep 2021 02:51:09 +0000
ROA not before: Wed 29 Sep 2021 02:51:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17714
IP address blocks: 114.30.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3156 (0xc54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:51:09 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B474EBE57384D80408026797E9B105F7F4B28CDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:67:c7:6b:6b:27:33:6f:c5:fa:ab:cf:ee:
d5:a3:06:2e:56:07:74:1c:91:90:a3:c7:67:88:b9:
08:c5:cf:8d:ec:6d:25:a6:ae:c3:eb:b8:6c:43:59:
1c:f3:4f:48:5a:af:7e:95:ec:7d:f9:83:8e:ee:5f:
8b:0c:48:14:6d:cb:ec:c8:29:ac:a5:d5:c9:ca:92:
64:6d:55:12:8b:9a:12:d5:4f:15:d6:ca:76:85:88:
91:0e:c6:0e:53:6f:96:94:33:25:3c:41:25:22:bf:
0a:57:f7:18:28:9a:c8:f1:2f:34:a9:e4:11:3b:4b:
e6:60:64:0d:1a:ac:27:83:23:b6:b1:87:a0:19:91:
df:78:33:5a:b3:31:a2:7e:fc:d1:01:fa:f9:b9:24:
8e:c8:2c:c5:2c:e3:83:a6:86:21:3e:8d:bc:12:fa:
4a:de:63:c9:2e:1c:08:ab:68:f9:46:66:ff:1f:0f:
92:a3:51:d6:31:d1:a2:be:17:52:e0:98:03:52:1b:
e3:d7:f0:9c:b2:ee:e4:4c:01:67:76:a9:64:a5:e7:
af:78:d1:ed:2e:7e:34:21:f3:e3:b8:fa:ec:e8:80:
79:16:99:01:e4:e7:3a:0d:96:7d:8e:00:9a:cf:e5:
df:b6:0e:d5:1b:19:5c:c0:35:48:b3:7f:10:21:f9:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:74:EB:E5:73:84:D8:04:08:02:67:97:E9:B1:05:F7:F4:B2:8C:DE
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tHTr5XOE2AQIAmeX6bEF9_SyjN4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.30.35.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:63:36:8f:9e:8d:6f:e8:c0:42:c4:7f:b1:b6:b1:8e:ab:92:
6b:c3:8a:3f:ca:8a:a1:ab:bb:80:d2:64:f9:34:b4:b8:4a:50:
c2:2e:72:d0:5a:88:ee:9c:a5:4d:9c:f0:1b:8a:b9:76:97:39:
7f:d7:12:d8:28:25:23:14:b8:b7:fa:43:59:36:10:5c:7a:96:
24:53:64:7e:74:04:ca:ae:cc:28:c6:f8:ba:65:6c:0d:81:91:
bd:a2:41:b2:1e:8b:b6:f9:cd:49:e5:23:9a:f7:a2:9f:88:69:
85:f0:c5:e4:5f:68:09:72:09:41:55:04:d9:de:bd:e5:30:c3:
50:e1:06:4f:e0:8f:80:cc:17:71:6d:a1:75:50:ec:7d:21:b1:
7e:f8:7d:36:36:b3:59:1f:d9:34:6c:31:33:68:7b:71:eb:58:
68:99:9a:3c:6c:65:83:44:82:04:0d:73:cd:24:8e:0f:b0:3e:
b4:54:c6:33:ec:25:e7:3c:64:b3:c2:98:96:08:d9:01:2c:5d:
b2:4c:3f:a7:b1:ad:95:65:58:3a:a6:eb:ab:61:4e:d3:fb:17:
ac:a3:d4:8a:46:2a:25:be:2e:6f:03:81:65:f9:a2:cf:88:ed:
26:90:77:45:37:57:9d:9a:7d:62:eb:3b:25:bf:61:bf:a6:cd:
a3:21:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org